syslog monitoring bayesian filter
btail
CRM114
CRM114 @ Black Hat 2010